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IN THE CLAIMS 

1 . (Currently Amended) In the network supporting virtual network connections 
associated with clients communicating through a first node, a method comprising: 

maintaining separate upstream routing policy information and downstream policy 
information at the first node, the upstream routing policy information being used at the 
first node to identify a second node to fonward upstream traffic received from at least a 
first client communicating through the first node, the downstream routing policy 
information being used at the first node to fonward downstream traffic received from a 
node to at least the first client; and 

for traffic transmitted by the first client through the first node, preventing use of 
the downstream policy routing information to route the traffic and instead utilizing the 
upstream routing policy information in the first node to ensure forwarding of the traffic 
transmitted by the first client from the first node to the second node and: 

wherein the traffic transmitted bv the first client through the first node intended for 
receipt bv a second client is forwarded to the second node. 

2. Canc e l (Canceled) 

3. (Original) A method as in claim 1 further comprising: 

receiving a session initiation request from a second client to establish a session 
to communicate through the first node; 

from an address server, obtaining network address assignment information for 
the first client that generated the session initiation request, the assignment information 
including network address information to be used for identifying the second client; and 

populating the downstream routing policy information at the first node to include 
the network address Information identifying the second client. 
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4. (Original) A method as in claim 3 further comprising: 

receiving a network message from the second client coupled to communicate 
through the first node, the network message intended for receipt by the first client; 

utilizing the upstream routing policy information in the first node to identify a path 

on which to fonward the network message; and 

forwarding the network message from the first node along the path to the second 

node. 

5. (Original) A method as in claim 4 further comprising: 

based on routing policy information at the second node, establishing a return 
path between the second node and the first node on which to forward the network 
messages to the first client through the first node. 

6. (Original) A method as in claim 1 further comprising: 

based on use of the upstream routing policy information and downstream policy 
information at the first node, establishing a VPN (Virtual Private Network) connection 
between the first node and the second node on which to forward traffic from the first 
client. 

7. (Original) A method as in claim 1 , wherein the second node is part of a service 
provider network and the traffic between the first and second node is at least partly 
supported by a core network supporting a label switching protocol. 

8. (Original) A method as in claim 1, wherein the upstream routing policy 
information and downstream policy information at the first node are each half duplex 
VRFs (Virtual Routing and Forwarding Instances) supporting forwarding of network 
messages generated by multiple clients communicating with each other through the first 
node of the second node. 
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9. (Original) A method as in claim 1 further comprising: 

at the second node, applying a target-specific packet processing technique to the 
traffic from the first client fonwarded through the second node. 

10. (Original) A method as in claim 1 further comprising: 

populating the downstream policy information at the first node with network 
address information of each new client associated with a given service supported by a 
corresponding service provider. 

1 1 . (Original) A method as in claim 1 0 further comprising: 

after the downstream policy information is populated in the first node for a new 
client, distributing the network address information populated in the downstream policy 
information at the first node to the second node via use of a notification message 
distributed according to a system routing protocol. 

1 2. (Original) A method as in claim 1 1 , wherein the system routing protocol is based 
on BGP (Border Gateway Protocol). 

1 3. (Currently Amended) A computer system at a first node of a network that at least 
partially supports a virtual network connection, the computer system comprising: 

a processor; 

a memory unit that stores instructions associated with an application executed by 
the processor; 

a communication interface that supports communication with other nodes of the 

physical network; and 

an interconnect coupling the processor, the memory unit, and the communication 
interface, enabling the computer system to execute the application and perform 
operations of: 

maintaining separate upstream routing policy information and downstream 
policy information at the first node, the upstream routing policy information being 
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used at the first node to identify a second node to fonward upstream traffic 
received from at least a first client communicating through the first node, the 
downstream routing policy information being used at least the first node to 
forward downstream traffic received from a node to at least the first client; and 

for traffic transmitted by the first client through the first node, preventing 
use of the downstream policy routing information to route the traffic and instead 
utilizing the upstream routing policy information in the first node to ensure 
forwarding of the traffic transmitted by the first client from the first node t the 
second node; and 

wherein the traffic transmitted bv the first client through the first node 
intended for receipt bv a second client Is forwarded to the second node. 

14. Cancel (Canceled) 

15. (Original) A computer system as in claim 13 that additionally perfomis 
operations of: 

receiving a session initiation request from a second client to establish a session 
to communicate through the first node; 

from an address server, obtaining networl< address assignment information for 
the first client that generated the session initiation request, the assignment information 
including network address infomiation to be used for identifying the second client; and 

populating the upstream routing policy information at the first node to include the 
network address information identifying the second client. 

16. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

receiving a network message from the second client coupled to communicate 
through the first node, the network message intended for receipt by the first client; 

utilizing the downstream routing policy information in the first node to identify a 
path on which to forward the network message; and 
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forwarding the network message from the first node along the path to the second 

node. 

17. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

based on routing policy information at the second node, establishing a return 
path between the second node and the first node on which to forward the network 
messages to the first client through the first node. 

18. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

based on use of the upstream routing policy information and downstream policy 
information at the first node, establishing a VPN (Virtual Private Network) connection 
between the first node and the second node on which to forward traffic from the first 
client. 

19. (Original) A computer system as in claim 13, wherein the second node is part of 
a service provider network and the traffic between the first and second node is at least 
partly supported by a core network supporting a label switching protocol. 

20. (Original) A computer system as in claim 13, wherein the upstream routing policy 
information and downstream policy information at the first node are each half duplex 
VRFs (Virtual Routing and Forwarding Instances) supporting forwarding of network 
messages generated by multiple clients communicating with each other through the first 
node and the second node. 

21. (Original) A computer system as in claim 13 that additionally performs 
operations of: 

at the second node, applying a target-specific packet processing technique to the 
traffic from the first client forwarded through the second node. 
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22. (Original) A computer system as in claim 22 that additionally perfomis 
operations of: 

populating the downstream policy Information at the first node with network 
address information of each new client associated with a given service supported by a 
corresponding service provider. 

23. (Original) A computer system as In claim 22 that additional perfomis operations 
of: 

after the downstream policy Information is populated in the first node for a new 
client, distributing the network address Infomiation populated in the downstream policy 
information at the first node to the second node via use of a notification message 
distributed according the a system routing protocol. 

24. (Original) A computer system as in claim 23, wherein the system routing protocol 
is based on BGP (Border Gateway Protocol). 

25. Cancel (Canceled) 

26. Cancel (Canceled) 

27. (New) The method of claim 1 wherein said first client and said second client are 
downstream from said first node and wherein said second node is upstream from said 
first node. 

28. (New) The computer system of claim 13 wherein said first client and said second 
client are downstream from said first node and wherein said second node is upstream 
from said first node. 
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